find-test-content
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The script fetches a query-index and then downloads and parses HTML pages from a user-specified host (e.g., live/preview domains like main--mysite--owner.aem.live or other arbitrary hosts) — i.e., it scrapes public site content which is untrusted and is read/interpreted as part of the workflow.
Audit Metadata